CALCULATOR · SCORED SEPTEMBER 2026 · CROWDSTRIKE EASM ADDED 13 OCTOBER 2026
ASM score calculator: re-weight ten attack surface management tools
Quick answer
Move the seven sliders to reflect what matters to your team and the ten tools re-rank instantly. The sliders start at our published weights, which give the same order as the main ranking. Only one vendor in the set publishes a price you can multiply, so the cost column is filled only where a published figure exists.
Scored September 2026 · CrowdStrike EASM added 13 October 2026 · Drawn from vendor product pages, docs and public pricing
Our ranking uses fixed weights that favor discovery and remediation. Your priorities may differ: a team that already has a good asset inventory may care more about exploitability validation, and a procurement-led evaluation may care more about pricing transparency. This calculator keeps every criterion score and reason exactly as published in the score matrix and lets you change only the weights.
What matters most to you?
Your weights as shares: DIS 20.0%, ATT 15.0%, VAL 15.0%, REM 20.0%, INT 10.0%, TTV 10.0%, PRC 10.0%
The only per-unit price published by a vendor in our set: Hadrian lists NOVA agentic penetration tests at 1,250 euros per test, with bundles available. Bundle prices are not published.
No vendor in our set publishes tiered ASM prices, so there is no plan selector. Rapid7 lists remediation workflows for higher tiers of its Command platform without prices.
How do the tools rank on your weights?
| Rank | Tool | Your score | Change vs our ranking | Published pricing | Annual cost at your inputs | Value |
|---|---|---|---|---|---|---|
| 1 | IONIX | 7.70 | Same | Not published. Contact sales. | Not published, contact sales | - |
| 2 | CyCognito | 7.60 | Same | Quote-based. Pricing basis published: total asset volume (ASM); active IPs and web applications (exposure validation). | Not published, contact sales | - |
| 3 | watchTowr | 7.50 | Same | Not published. Contact sales. | Not published, contact sales | - |
| 4 | Hadrian | 7.10 | Same | NOVA agentic penetration test: from 1,250 euros per test excluding VAT, bundles available. | EUR 1,250 NOVA tests only, list price per test; bundles not priced publicly; ATLAS priced on request | 56.80 points per EUR 10,0001 |
| 5 | Cortex Xpanse | 6.80 | Same | Not published. Contact sales. | Not published, contact sales | - |
| 6 | Tenable ASM | 6.05 | Same | ASM: quote only. Tenable publishes prices for some adjacent products. | Not published, contact sales | - |
| 7 | Microsoft Defender EASM | 6.00 | Same | Billed through Azure on billable assets (approved host:IP combinations, domains and IP addresses) after a 30-day free trial. See Microsoft's pricing page for the current rate. | Not published, contact sales | - |
| 8 | Rapid7 Surface Command | 5.95 | Same | Trial available. Price not published. | Not published, contact sales | - |
| 9 | CrowdStrike EASM | 5.90 | Same | Not published for EASM. CrowdStrike's pricing page lists endpoint bundles only (from $7.99 per device per month) and says add-ons cost extra. | Not published, contact sales | - |
| 10 | Censys ASM | 5.85 | Same | ASM: contact sales. A free Censys platform account exists. | Not published, contact sales | - |
1 Value divides your score by the published cost of NOVA tests only. It is not comparable across vendors because no other vendor in the set publishes a price.
Your score = (DIS x w1 + ATT x w2 + VAL x w3 + REM x w4 + INT x w5 + TTV x w6 + PRC x w7) / (w1 + w2 + w3 + w4 + w5 + w6 + w7), where each criterion score is our published 0 to 10 score and each w is your slider value. With the default sliders (4, 3, 3, 4, 2, 2, 2) this equals our published weighted score. Annual cost = NOVA tests per year x 1,250 euros, Hadrian only.
On your weights the leader is IONIX (7.70).
How should you use the calculator?
What do the sliders change?
Only the weights. Every criterion score and its reason stay exactly as published in the score matrix. Set a slider to 0 to ignore a criterion.
Why does only one tool show a cost?
Because only Hadrian publishes a per-unit price in our set: from 1,250 euros per NOVA penetration test, excluding VAT. Microsoft Defender EASM publishes a billable-asset definition and bills through Azure, and CyCognito publishes its pricing basis, but neither lists a per-unit price we could verify. We do not estimate prices.
Can I get the same result as the main ranking?
Yes. Press 'Reset to our weights'. The defaults are our published weights divided by five, which gives the same scores and order.
Are these scores based on testing?
No. They are an editorial assessment of public vendor documentation, scored September 2026, with CrowdStrike EASM added 13 October 2026. See How we score.
Scores are an editorial assessment. Prices are as published by the vendor and reviewed on 27 September 2026.